CVE-2013-0246
Published: 16 July 2013
The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of otherwise restricted images via unspecified vectors.
Priority
Status
Package | Release | Status |
---|---|---|
drupal6 Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
lucid |
Ignored
(end of life)
|
|
oneiric |
Ignored
(end of life)
|
|
precise |
Ignored
(end of life)
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Ignored
(end of life)
|
|
saucy |
Does not exist
|
|
trusty |
Does not exist
|
|
upstream |
Released
(6.28)
|
|
utopic |
Does not exist
|
|
vivid |
Does not exist
|
|
wily |
Does not exist
|
|
xenial |
Does not exist
|
|
yakkety |
Does not exist
|
|
zesty |
Does not exist
|
|
drupal7 Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
lucid |
Does not exist
|
|
oneiric |
Does not exist
|
|
precise |
Ignored
(end of life)
|
|
quantal |
Ignored
(end of life)
|
|
raring |
Not vulnerable
(7.22-1)
|
|
saucy |
Not vulnerable
(7.22-1)
|
|
trusty |
Not vulnerable
(7.22-1)
|
|
upstream |
Released
(7.19)
|
|
utopic |
Not vulnerable
(7.22-1)
|
|
vivid |
Not vulnerable
(7.22-1)
|
|
wily |
Not vulnerable
(7.22-1)
|
|
xenial |
Not vulnerable
(7.22-1)
|
|
yakkety |
Not vulnerable
(7.22-1)
|
|
zesty |
Not vulnerable
(7.22-1)
|